topic Re: ASA load balancing for two diff. Service Providers in Network Security

ASA load balancing for two diff. Service Providers

Jigar Dave — Mon, 11 Mar 2019 17:49:40 GMT

Hello Group, Need your help, I need your help on this. in my organization I use two different service providers in which for one service provider I have to use static IP and for second service provider I use BGP, is it possible to equally load balance my internal traffic going for internet while putting ASA inbetween and not changing any routing logic. physical design is like this

| -------- ISP 1 ( using Static IP) -------------------------------- | Internet

internal traffic------|

| -------- ISP 2 (using BGP) --------------------------------------- | Internet

does ASA have capability to load balance it ?

Regards,

Jigar Dave

Re: ASA load balancing for two diff. Service Providers

jacobs_son — Mon, 24 May 2010 10:35:43 GMT

I think you would have to run GLBP on the 2 routers for this to work...

Re: ASA load balancing for two diff. Service Providers

Jigar Dave — Mon, 24 May 2010 10:44:47 GMT

Hi James, Thanks for the reply but I want to use ASA on front means two links

from ISP directly terminates on ASA ( link capacity is 2 MB each on ethernet port of ASA). do you suggest me any link load balancing document for ASA.

Thanks in advance

Jigar Dave

Re: ASA load balancing for two diff. Service Providers

Federico Coto Fajardo — Mon, 24 May 2010 11:36:38 GMT

Hello Jigar,

The ASA can load balance traffic with up to three default gateways pointing out the same interface.

i.e

route outside 0 0 x.x.x.x

route outside 0 0 y.y.y.y

route outside 0 0 z.z.z.z

This will mean that the three next-hop IP address belong to the same subnet.

The ASA will not allow to load balance traffic setting more than one default gateway via different interfaces with the same metric.

So, you cannot load balance between different ISPs since the ISPs will have an IP belonging to a different subnet.

The ASA will allow default gateways out different interfaces only with a different metric so that can be used as a backup mechanism along with the IP SLA feature. This however, will accomplish redundancy but not load balancing.

Hope to help.

Federico.